N3904026Q3117 OPSEC Encl 2.pdf

This document is Portsmouth Naval Shipyard's Operations Security (OPSEC) Contract Requirements form, which outlines security protocols and information protection standards that contractors must follow during contract performance.

An OPSEC Plan is required to record, identify, and monitor contractor OPSEC activities during performance. According to the form, the specific OPSEC Plan requirement for this contract is marked as NOT required, with an effective date of 2/10/26. However, contractors remain responsible for avoiding inadvertent disclosure of unclassified or classified information throughout the contract period. Contractors and subcontractors must protect all Critical Information and Indicators (CII), Controlled Unclassified Information (CUI), and Personally Identifiable Information (PII) from unauthorized disclosure. Key protections include: prohibiting posting of sensitive government information to corporate websites, social media, or personal email accounts; restricting verbal discussion of Portsmouth Naval Shipyard work; protecting operation schedules, equipment capabilities, and asset identification details; and prohibiting photographs or videos within shipyard work areas, drydocks, and controlled access areas. Contractors must immediately report any unauthorized disclosure or suspected compromises to the Activity Security Manager and Industrial Security Officer. Violations may result in contract termination and criminal prosecution. Additional requirements address Portable Electronic Device (PED) policies requiring coordination with sponsors prior to use of devices capable of recording, copying, or transmitting data within shipyard facilities.